| From: | Dave Page <dpage(at)pgadmin(dot)org> |
|---|---|
| To: | pgadmin-hackers(at)lists(dot)postgresql(dot)org |
| Subject: | pgAdmin 4 commit: Allow editing of data where a primary key column incl |
| Date: | 2019-06-20 11:21:40 |
| Message-ID: | E1hdv8O-00023Y-F7@gothos.postgresql.org |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgadmin-hackers |
Allow editing of data where a primary key column includes a % sign in the value. Fixes #4036
Fix an XSS issue seen in View/Edit data mode if a column name includes HTML. Fixes #4367
Branch
------
master
Details
-------
https://git.postgresql.org/gitweb?p=pgadmin4.git;a=commitdiff;h=6e8ebbd375f825acde7383244bf83d1c9c1c15e5
Author: Aditya Toshniwal <aditya(dot)toshniwal(at)enterprisedb(dot)com>
Modified Files
--------------
docs/en_US/release_notes_4_9.rst | 4 +-
.../xss_checks_panels_and_query_tool_test.py | 28 ++++++++++++-
web/pgadmin/tools/sqleditor/__init__.py | 7 +++-
web/pgadmin/tools/sqleditor/command.py | 46 ++++++++++++++++------
web/pgadmin/tools/sqleditor/static/js/sqleditor.js | 4 +-
.../templates/sqleditor/sql/default/insert.sql | 2 +-
.../templates/sqleditor/sql/default/update.sql | 2 +-
web/pgadmin/utils/driver/psycopg2/cursor.py | 3 ++
web/regression/feature_utils/pgadmin_page.py | 22 +++++++++++
web/regression/python_test_utils/test_utils.py | 17 +++++---
10 files changed, 112 insertions(+), 23 deletions(-)
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Khushboo Vashi | 2019-06-20 11:24:46 | [pgAdmin4][Patch] - RM 4380 - Table properties dialog - can not edit columns and partitions at the same time |
| Previous Message | Akshay Joshi | 2019-06-20 06:48:34 | Re: [pgAdmin4][Patch]: RM #4362 trigger function create script |